How to block website access using squid

access-control-listsquid

I would like to block black listed URLs and Domains using the squid proxy server.
In the tutorials, what is mostly shown how to block one URL/Domain, however I would like to have the URLs/Domains in a file and have one acl on the config file so that when it comes to updating the list, I just change the file instead of the config file

how can i go about this

Best Answer

In addition to what otheres have suggested, Squid can be configured to talk to other proxy servers either as parents or peers. You can use a filtering proxy alongside squid to block the sites that you want to block. You can search for examples of squid+privoxy or squid+dansguardian.

Related Solutions

Two Squid chaining

Use following in squid A configuration (normally /etc/squid/squid.conf)

cache_peer <squid server B IP> parent <server B squid port> 3130 no-query no-digest no-netdb-exchange 

acl otherproxy url_regex "/etc/squid/divert.txt"
cache_peer_access <Squid server B IP> allow otherproxy
never_direct allow otherproxy
cache_peer_access <squid server B IP> deny all

And following in squid B configuration at top of other acls

acl A_proxy src <Squid server A IP>/32
http_access allow A_proxy

After that you can add regular expressions to file /etc/squid/divert.txt and reload squid. The matching URLs will be requested from Server B and not directly.

The reason why I mentioned adding acl on proxy B too is too avoid authentication, connection limit, etc. settings on proxy B affecting clients of proxy A as such problems are very hard to debug. So it is better to allow all requests from proxy A to proxy B. If you want to block something block it in both proxy configurations.

Refresh squid rules after every change

Running squid -k reconfigure will cause it to reload the configuration without restarting.

You can use incron to monitor your /etc/squid/users/exceeded list to automatically trigger the reconfigure command whenever that file is written to.

Best Answer

Related Solutions

Two Squid chaining

Refresh squid rules after every change

Related Topic